Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
File:                     zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json)
Hash identifier:          syRPFuFjGvWL9ijeEh6QFnBG+PeIGU2iDlUWJ8HbPEw=
Subject key identifier:   57:CE:62:39:CE:2D:B6:EA:15:22:FE:C5:E2:49:C0:10:A3:7B:9F:ED
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Certificate issuer:       /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
Manifest number:          3A
Signing time:             Thu 23 Jul 2026 09:59:42 +0000
Manifest this update:     Thu 23 Jul 2026 09:59:42 +0000
Manifest next update:     Thu 30 Jul 2026 09:59:42 +0000
Files and hashes:         1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: YliZLawudS8gq0PxaWJe14K7zrkbvTDJLjxnCyQ0wfY=)
                          2: 93D240467ABE11F18A7AD4526AA30FBC.roa (hash: A5aC7Faz0VV3KV4p5Rsl3QCLtxJwuOgvpBty2jVbaFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
        Validity
            Not Before: Jul 23 09:59:42 2026 GMT
            Not After : Jul 30 09:59:42 2026 GMT
        Subject: CN=6a61e60e-dc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:69:97:4a:92:db:d6:03:0c:87:1e:e2:5b:
                    29:6b:02:ec:de:50:75:2a:63:6a:7f:c3:14:fc:75:
                    9b:43:e7:25:ac:11:95:e3:05:41:4a:53:46:7b:cf:
                    68:e0:6a:33:35:5c:a8:ea:47:35:bc:c6:cc:b3:fc:
                    ca:46:aa:27:b7:9a:e2:28:b1:e5:29:d3:4e:1c:45:
                    11:ca:f5:d3:42:bd:78:ad:c1:9f:0a:6f:06:23:92:
                    a7:ff:84:9b:3c:c3:76:1a:da:8f:c2:9f:85:5e:71:
                    2a:ac:33:32:8e:7a:4f:d1:d9:8c:b8:13:f3:ea:96:
                    73:0b:cc:f7:ce:b9:75:7e:4d:a2:cf:59:a4:ce:f7:
                    0b:4b:43:ca:cc:2b:92:7c:60:31:27:30:af:75:b5:
                    ef:d9:33:2e:6c:20:dc:a2:45:d9:f9:d8:4b:bb:fb:
                    22:d7:76:a3:2b:8d:0b:18:84:8d:39:1f:7b:49:c8:
                    21:f6:80:ce:34:1b:51:1e:4c:5c:6e:c2:c5:d8:cc:
                    f2:7e:9a:da:94:14:b7:07:bc:dc:5b:a7:10:28:85:
                    64:dd:97:99:d3:1b:5a:e4:33:69:e8:61:52:1c:f8:
                    f5:af:b5:d9:78:5b:17:28:a2:a6:96:66:4c:78:3f:
                    e9:c1:02:8b:03:e4:b7:c5:10:73:7f:89:62:ca:67:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CE:62:39:CE:2D:B6:EA:15:22:FE:C5:E2:49:C0:10:A3:7B:9F:ED
            X509v3 Authority Key Identifier:
                keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:0e:73:cf:e6:d5:18:20:81:50:9f:9c:23:9a:29:fc:3a:
         b7:e9:5c:11:be:19:bb:d5:e9:16:91:f2:ad:09:32:fe:cb:9a:
         b2:f7:90:7f:ff:7b:9b:44:81:bc:66:d2:02:8e:51:37:87:9e:
         67:92:96:6f:68:af:ab:e5:b3:3f:98:8c:e0:61:f0:1a:6a:61:
         5a:40:57:ce:4d:84:b0:af:36:12:82:5f:e4:f9:d4:1e:f7:b8:
         b8:f8:fc:f4:57:a1:8a:ef:ac:07:a0:21:21:61:de:8f:b2:10:
         79:c5:e8:e5:8e:14:f8:85:77:be:e3:82:28:7b:d6:ec:d1:e2:
         6f:6e:e1:53:7e:3e:83:60:1d:6b:b5:41:40:0c:20:5e:11:1b:
         66:b0:4a:95:58:1f:39:62:a3:01:ac:38:5f:88:f2:da:2e:b1:
         d1:cd:d6:f4:fb:e7:21:93:7b:62:9c:54:f9:66:b0:cd:42:e6:
         27:21:1e:aa:cf:41:ef:1f:15:5b:a0:0b:16:98:ea:b2:d9:fb:
         f3:ac:3e:25:fc:a6:bc:e8:c5:8b:b8:44:bd:9f:2c:2c:88:4e:
         80:90:74:2f:59:6c:87:73:cc:5c:d9:30:6c:c1:48:ef:61:9a:
         ad:01:39:06:15:ff:c2:c8:6e:0b:de:3b:a5:5c:a5:b7:14:bd:
         45:bd:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:39 2026 by rpki-client